Teaching an agent to write code is easier to do in a proper sandbox - run a local PyPI/npm mirror.

The problem is web research tasks. That's what caused the German wiki and Australian healthcare portal attacks.